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INTRODUCTION 

ATM/ALERT procedure was first developed for the security access of ATM transactions which 
only used PIN numbers as the form of identification. Subsequent enhancements to ATM/ALERT 
have made it effective for many different types of identification now in operation other than just 
PIN numbers. Iris Scans, Thumb Prints, Facial Scans and other methods of identification are now 
available along with PIN numbers. 

FUNCTIONS 

ATM/ALERT has two functions which are as follows: 

- To recognize a valid identification which will then allow the requested action of an ATM 
transaction, access to a secured area, etc. 

and/or 

- To recognize an 'alert' signal issued by the user who is under duress which will then activate 
security measures such as a silent alarm or whatever is deemed appropriate action. In some 
circumstances, the requested function could still be allowed to prevent a warning that the 
alarm has been activated. 

METHODOLOGY 

The methodolog y requires two types of ID's with one a valid identification and the other for alert 
indication. These two ID's may be any two methods not necessarily the same. For example, a valid 
ID might be an IRIS Scan that could be combined with the alert signal generated by the entering 
of an alert PIN and so forth. 

Depending on the method of providing identification, the first encounter with the identification 
might be sufficient to provide a valid status.... or an alert condition. For example, if two PIN 
numbers are used, one for valid status and the other for alert status, the first-time entry of a PIN 
number would be sufficient to determine if this is a valid entry or the alert entry and the second 
entry would not be needed.. 

However, perhaps the first-time entry of another method of identification, such as an Iris scan, 
might not by itself have enough ability to signal a valid/alert condition. A subsequent entry of 
another identification such as a PIN number might also be required to signal the status. A valid 
Iris scan combined with a valid PIN number would grant the requested action, while a valid Iris 
scan combined with an alert PIN number would signal the alert status. Therefore, in certain 
combinations of providing identification, an 'second ID required* indication would be part of the 
ATM/ALERT procedure. 
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SOFTWARE CODING 

ATM/ALERT has been coded in two main-frame languages, COBOL and Assembler. However, 
it is easily translated into any other media including coding for the P/C environment. 

The methodology of ATM/ALERT is to perform 'traffic control 1 for most of the already in-place 
computer activity. It goes back and forth with functions such acquiring the identification and 
checking for valid/alert status by the established software Then the valid/alert status indication is 
passed from the established software back to ATM/ALERT which will make the determination of 
returning control to the established function to allow the requested action or notifying the 
established software to activate the appropriate alert action. ATM/ALERT 'traffic control' 
functions could also be incorporated directly into the already established software coding with 
little effort. 

Selection of type of identification, appropriate actions and so forth are the choice of the user 
company/network and may even vary from user to user. 

EXAMPLES 

#1 - A PIN number is used for the first-time identification. It would be checked against two PIN 
numbers, one valid and the other an alert signal to determine status. If a valid number, the 
requested action is performed. If it is the alert number, perform the alert action. In this 
situation, only the first-time entry of identification would be needed.. 

#2 - An Iris Scan is used as the first ID. If there is the possibility of being able to use both the left 
and the right eye for different Iris scans, then the right eye could be used for first-time proper 
validation or the left eye used for the alert signal or vice versa. In this case, both the valid 
and the alert signals could be identified by the same method of the Iris Scan, In this situation, 
similar to example #1, only the first-time entry of identification would be needed.. 

#3 - If an Iris Scan is used for first-time identification (either eye) as validation and there is not the 
possibility of using both eyes as in the example #2 above, then the second-time entering of 
another type for valid/alert such as a PIN number which would be additional validation.,. OR 
would be the alert signal. This example shows the use of two different methods, an Iris Scan 
and a PIN number, for the valid/alert signal combination. In this situation, an indicator would 
be in the user profile to signal that a second-time entry is also required. 

#4 - Indication of a requirement for the need for a second ID might also be appropriate when a 
facial scan is used for first-time identification. In this situation, a second-time identification 
entry would be required. The second could be entering of a valid/alert PIN number or thumb 
print (right for valid, left for alert, or vice versa). 
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RECAP 

The above examples show just some of how the same and/or different methods would be used for 
each validation. The various combinations for control of the access would be the choice of the 
particular installation, network or company and would be stored with the user's profile. And there 
could be different combinations for the various users within the same installation, network, etc.. 

This methodology is applicable for ATM transactions, controlled access to secured areas, 
validation of computer logons, and all other activities that require a security access with the 
option of signalling an alert. 
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Initiated by ; Insertion of ATM card 

Pressing a 'start' button/key 
Approach an 'entry 1 zone.... etc. 



ID entered by 'PIN' number, IRIS scan, 
thumb print.. .etc 



Valid ID? Recognizable as belonging 
to an individual? Both 'good' ID or 
'alert' must pass this test.. or re-enter ID 



ALERT ID signals the performance of 
the alarm procedures.. probable silent. 
Then the normal procedures must be 
performed to give appearance of 
'normal' conditions. 



Second ID check switch is 'ON 1 at first 
and second ID switch requied is 
indicated in user profile. If needed, 
switch is turned 'off to allow for further 
check and additional ID entry is 
requested. 

Perform requested action. .ATM 
transaction, Security door entry, etc. 

In some types of requested actions, a 
second request is valid.. .Such as 
another ATM transaction, etc. 

Perform associated closing actions 
such as an audit log recording, 
security log entry, etc. 



ATMALERT CSECT 
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* COPYRIGHT 1998 ALL RIGHTS RESERVED. JMP ASSOCIATES 

* ATM/ALERT IS A PROCEDURE THAT HAS TWO FUNCTIONS: 

* 1 - TO RECOGNIZE A VALID IDENTIFICATION WHICH WILL 

* ALLOW THE REQUESTED ACTION SUCH AS AN ATM 

* TRANSACTION OR ACCESS TO A SECURITY AREA 

* AND/OR 

* 2 - TO RECOGNIZE AN 'ALERT' SIGNAL ISSUSED BY THE USER 

* WHO IS UNDER DURESS. THIS WILL THEN ACTIVATE 

* SECURITY MEASURES SUCH AS A SILENT ALARM OR OTHER 

* APPROPRIATE MEASURES. THE REQUESTED ACTION COULD 

* ALSO BE ALLOWED TO PREVENT A WARNING THAT THE 

* ALARM HAS BEEN ACTIVATED. 
* 

* * NOTE - THE ROUTINE 'READ-CUSTOMER-CARD' IS EXECUTED 

* IN THE STANDARD ATM PROGRAM AND THEN CONTROL 

* IS PASSED TO THIS MODULE. 

RETURNR EQU 9 
SAVE (14,12) 
BALR 12,0 
USING*, 12 

BACKCHN LA 5,SAVREG 
ST 13,4(5) 
ST 5,8(13) 
LR 13,5 

* NOTE - THIS CHECK IN PROCEDURE IS EXECUTED IN THE STANDARD 

* PROCESSING PROGRAM ALREADY IN USE. 

* THE ONLY CHANGES ARE TO PLACE A STATUS INDICATION 

* IN THE HOLD FIELD(PINID) AND AN INDICATOR TO 

* INDICATE IF A SECOND ID IS REQUIRED. 

LA l.PINID 

LA 15,PINRTN EXTERNAL REFERENCE 
BALR 14,15 

* 

CLC PINID,=CAOKAY' 
BE DOREQST 



CLC PINID=CERROR' 



* 
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CLC PINID,=C'ALERT' 
BE ALERTN 

CKSECID CLC SEdD,=C' ' 
BE DOREQST 

* STANDARD ERROR ROUTINE 

ERRORTN LA 15.STDERR EXTERNAL REFERENCE 
BALR 14,15 

* 



DO THE STANDARD REQUEST 



* 

DOREQST MVC REQIND=C • 
LA 1,REQIND 

LA 15,DOREQ EXTERNAL REFERENCE 
BALR 14,15 

CLC REQIND,=C'MORE' 
BE DOREQST 

* 

***** LM 13,4(13),12 RETRUN DOES THIS ««««< 

FINAL RETURN (14,12),RC=0 
* 

* 

* ATM ALERT ROUTINES 
* 

ALERTN LA 15,PICRTN PICTURE RTN - EXTERNAL REFERENCE 

BALR 14,15 

* 

LA 15,ALARMRTN ...ALARM RTN-EXTERNAL REFERENCE 
BALR 14,15 

* 

B DOREQST 

* 

* CONSTANTS AND SAVE AREAS 
* 

SAVREG DS 18F 
* 

REQIND DC CL5" 
* 

PINID DS CL5" 
SECID DS CLl'X* 



PINRTN DC V(PINRTNX) 
PICRTN DC V(PICRTNX) 
STDERR DC V(STDERRX) 
DOREQ DC V(DOREQX) 
ALARMRTN DC V(ALARMX) 
END 



ID DIVISION pglof3 
PROGRAM-ID. ATMALERT. 

* REMARKS. 

* COPYRIGHT 1998 ALL RIGHT RESERVED. JMP ASSOCIATES . 

* ATM/ALERT IS A PROCEDURE THAT HAS TWO FUNCTIONS: 

* 1 - TO RECOGNIZE A VALID IDENTIFICATION WHICH WILL 

* ALLOW THE REQUESTED ACTION SUCH AS AN ATM 

* TRANSACTION OR ACCESS TO A SECURITY AREA 

* AND/OR 

* 2 -TO RECOGNIZE AN 'ALERT SIGNAL ISSUED BY THE USER 

* WHO IS UNDER DURESS. THIS WILL THEN ACTIVATE 

* SECURITY MEASURES SUCH AS A SILENT ALARM OR OTHER 

* APPROPRIATE ACTION. THE REQUESTED ACTION COULD 

* ALSO BE ALLOWED TO PREVENT A WARNING THAT THE 

* ALARM HAS BEEN ACTIVATED. 
* 

* NOTE - THIS IS AN EXAMPLE OF MOST OF THE ACTIVITY BEING 

* INITIATED BY THIS ALERT PROGRAM AND BEING 

* PERFORMED IN THE STANDARD ACCESS PROCESSING 

* PROGRAM. 
* 

* CONVERSELY, MOST OF THE ACTIVITY CAN BE PERFORMED IN 

* THE STANDARD PROCESSING PROGRAM AND THE ALERT 

* PROCEDURES CAN BE INCORPORTED INTO THE STANDARD 

* PROGRAM. EITHER WAY, THERE IS VERY LITTLE 

* RE-PROGRAMING REQUIRED. 
* 

ENVIRONMENT DIVISION. 

DATA DIVISION. 
WORKING-STORAGE SECTION 
01 ID-CODE. 

02 ID-CODE-HOLD PIC XXXXX VALUE SPACES. 

02 SECOND-ID-REQ-IND PIC X VALUE SPACE. 

01 REQUEST-INDICATOR. 

02 REQUEST-INDICATOR-HOLD PIC XXXX VALUE SPACES. 

* 

01 SECOND-ID-REQ-SW PIC X VALUE *X\ 

PROCEDURE DIVISION. 
* 

INITIATION-PROCEDURE. 

* NOTE - THIS PROCEDURE EXECUTED IN THE STANDARD 
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* PROCESSING PROGRAM ALREADY IN USE. THUS/THERE 

* IS NO MAJOR CHANGE TO THE EXISTING CODE AT THIS 

* CONTROL, CAN BE THEN BE PASSED TO THIS MODULE 

* ALSO, AFTER EACH 'CALL' (PASSING CONTROL) TO THE 

* STANDARD PROGRAM FROM THIS MODULE, CONTROL IS 
" RETURNED TO THIS MODULE AFTER THE ROUTINE IS 

* COMPLETED IN THE STANDARD PROGRAM 

k 

ID-ENTRY-PROCEDURE. 

CALL 'IDVALED" USING ID-CODE-HOLD. 

* NOTE - THIS CHECKING PROCEDURE IS EXECUTED IN THE STANDART 
> PROCESSING PROGRAM ALREADY IN USE. 

* THE ONLY CHANGES ARE TO PLACE A STATUS INDICATION IN 

* THE HOLD FIELD(ID-CODE) AND AN INDICATOR TO INDICATE 

* IF A SECOND ID IS REQUIRED 

* INDICATION ACTION 

* AOKAY HONOR THE CUSTOMERS REQUEST 
ERROR ID ERROR -ENTER ID AGAIN 
ALERT ACTIVATE THE ATM/ALERT ROUTINE 

' W NO TECOGNIZED- ENTER ID AGAIN 

IF ID-CODE-HOLD IS EQUAL TO 'AOKAY', 
GO TO CHECK-SECOND-ID. 

t 

IF ID-CODE-HOLD IS EQUAL TO 'ERROR*, 
CALL STANDARD-ERROR-ROUTINE'. 

IF ID-CODE-HOLD IS EQUAL TO 'ALERT, 
GO TO ATM-ALERT-ROUTINE. . 
CHECK-SECOND-ID. 
IF SECOND-ID-REQ-SW IS EQUAL TO SPACE 
GO TO PERFORM-REQUESTED- ACTION. 

MOVE SPACE TO SECOND-ID-REQ-SW. 
GO TO ID-ENTRY-PROCEDURE. 

PERFORM-REQUESTED-ACTION. 

CALL "REQACT USING REQUEST-INDICATOR. 

* 

* NOTE - THIS CHECKING PROCEDURE IS EXECUTED IN THE STANDARD 
k PROCESSING PROGRAM ALREADY IN USE 
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" THE ONLY CHANGE IS TO PLACEA STATUS INDICATION IN 

► THE HOLD FIELD(REQUEST-INDICATOR) FOR FURTHER 

* CHECKING. 

i 

* INDICATION ACTION 

* MORE CUSTOMER HAS ANOTHER REQUEST 

► NONE CUSTOMER IS DONE -END PROGRAM 

IF REQUEST-INDICATOR-HOLD IS EQUAL TO 'MORE', 
GO TO PERFORM-REQUESTED-ACTION 

ELSE 
CALL 'NORCLS'. 

STOP RUN. 

' NOTE - THE ALERT ROUTINE PERFORMS SECURITY REOCEDURES 
AND THEN CONTINUES ON WITH NORMAL PROCESSING SO AS 

► NOT TO WARN OF THE ALERT PROCEDURES. 

ATM-ALERT-ROUTINE. 
CALL TAKEPIC. 

* NOTE -THIS IS OPTIONAL AND CAN BE REMOVED. MANY 
■ PROCEDURES ALREADY HAVE THE PICTURE TAKING 

► PROCESS IN PLACE. NO ADDITIONAL CODING REQUIRED 

CALL 'SECALRM'. 

n 

* NOTE - THE SECURITY ALERT IS MOSTLY A PHYSICAL 

► TELEPHONE LINE TYPE CONNECTION. 

GO TO PERFORM-REQUESTED-ACTION. 

► NOTE - BACK TO NORMAL TYPE PROCESSING SO AS NOT 

* TO ENDANGER THE CUSTOMER. 
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As a below named inventor, I hereby declare that: 

My residence, post office address, and citizenship are as stated below next to my name. 

t believe I am the original, first and sole inventor (if only one name is fisted below) or an original, first and joint inventor (if plural 
names are listed beiow) of the subject matter which is claimed and for which a patent Is sought on the invention entitled: 



the specification of which 
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(Title of the invention) 



as United States Application Number or PCT international 



Application Number 
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(if applicable). 
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I hereby claim the benefit under 35 U.S.C. 120 of any United States appfication(s), or 365(c) of any PCT international application designating the 
United States of America, listed below and, insofar as the subject matter of each of the claims of this application is not disclosed in the prior 
United States or PCT International application in the manner provided by the first paragraph of 35 U.S.C. 112, i acknowledge the duty to disclose 
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and the national or PCT international filing date 1 of this application. 
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Parent Patent Number 
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